Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: Mozilla Thunderbird — DSA-4139 Clear all filters
TI-2018-03710 CVE-2018-5145 · GHSA-576m-x596-j6g4

Memory corruption in Mozilla Firefox ESR

Priority MEDIUM 47

Memory safety bugs were reported in Firefox ESR 52.6.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02964 Published 2018-06-11 Fixed in 52.7 CWE-119
TI-2018-03709 CVE-2018-5144 · GHSA-4xfj-vf8f-vwpp

Integer overflow in Mozilla Firefox ESR

Priority LOW 38

An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter.

CVSS 3.0HIGH 7.3 Network No auth No interaction EPSS 0.03198 Published 2018-06-11 Fixed in 52.7 CWE-190
TI-2018-03695 CVE-2018-5129 · GHSA-x4cw-r9m3-pj4c

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 43

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.03037 Published 2018-06-11 Fixed in 52.7, 59 CWE-787
TI-2018-03693 CVE-2018-5127 · GHSA-669j-hvf3-2f28

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 49

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.07832 Published 2018-06-11 Fixed in 52.7, 59 CWE-119
TI-2018-03691 CVE-2018-5125 · GHSA-32j6-x4jq-jq3x

Memory corruption in Mozilla Thunderbird

Priority MEDIUM 43

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02478 Published 2018-06-11 Fixed in 52.7, 59 CWE-119